Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G01cezPWZpowrCuaTeL_z2THEas.cer
File:                     G01cezPWZpowrCuaTeL_z2THEas.cer (raw, json)
Hash identifier:          gROkOFvh8Ti3XDahhDuv6GP1WYdzCzc8vhXQ83kEwxw=
Subject key identifier:   1B:4D:5C:7B:33:D6:66:9A:30:AC:2B:9A:4D:E2:FF:CF:64:C7:11:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018571D60DA3C9D444F31EB7F31B055E910C
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ef/994fa5-627e-4312-adc9-aecbdad80f27/1/G01cezPWZpowrCuaTeL_z2THEas.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ef/994fa5-627e-4312-adc9-aecbdad80f27/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 02 Jan 2023 09:35:31 +0000
Certificate not after:    Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources:    IP: 62.204.38.0/24
                          IP: 2a11:92c0::/29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d6:0d:a3:c9:d4:44:f3:1e:b7:f3:1b:05:5e:91:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 09:35:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1b4d5c7b33d6669a30ac2b9a4de2ffcf64c711ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d5:23:a8:70:ab:71:80:09:b1:ec:9b:81:70:
                    44:ff:6e:14:75:d8:ae:1e:89:7e:b0:a6:a1:bf:11:
                    9e:ea:ef:05:00:67:ff:01:b0:e4:7f:60:0c:03:97:
                    de:65:67:ba:14:be:44:8a:d8:9e:ae:68:2a:58:46:
                    6f:9f:bc:0d:e7:c0:6e:e7:b2:4a:cf:3c:c5:6d:cf:
                    ae:9f:45:13:a2:68:4d:94:d8:4f:25:41:79:14:f1:
                    81:ff:4c:e6:4a:ca:8c:48:0c:49:2c:b7:60:4d:a3:
                    53:47:4f:20:c7:60:61:a9:7e:33:ee:8d:02:e7:78:
                    4f:79:2e:47:95:14:66:fa:a9:20:61:fc:77:fa:5e:
                    ee:ef:df:31:af:d2:0f:0d:44:f2:05:31:0b:8f:e8:
                    51:a8:ed:05:16:84:3d:d5:69:97:50:3c:c7:0f:8e:
                    f7:1e:71:e4:4a:4f:26:27:b6:bd:60:03:d6:17:9e:
                    d2:5c:c1:ff:9b:2f:fd:bb:3a:3f:71:91:60:58:6f:
                    1f:36:45:2a:a6:e9:da:67:89:bd:02:8a:b9:45:d1:
                    cd:dc:30:fb:be:1f:e6:28:fe:c3:9f:20:86:69:40:
                    dd:55:5d:6f:c8:54:50:82:4a:b5:ac:77:bc:9b:f8:
                    83:50:2d:17:c4:6a:f9:17:fb:f6:c7:7d:98:9f:64:
                    11:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4D:5C:7B:33:D6:66:9A:30:AC:2B:9A:4D:E2:FF:CF:64:C7:11:AB
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/994fa5-627e-4312-adc9-aecbdad80f27/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/994fa5-627e-4312-adc9-aecbdad80f27/1/G01cezPWZpowrCuaTeL_z2THEas.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.204.38.0/24
                IPv6:
                  2a11:92c0::/29

    Signature Algorithm: sha256WithRSAEncryption
         20:f1:c8:6e:5c:f0:76:55:3d:75:9f:e2:5c:3e:b3:cd:25:95:
         59:8d:f9:e2:f9:60:b5:d2:c6:17:1c:e7:1b:51:e7:6a:df:03:
         a3:eb:39:6f:ce:16:9d:45:40:61:1a:82:2d:c1:ec:12:b4:73:
         29:79:1b:20:a8:0f:85:81:5f:4e:f7:41:ef:71:b8:b2:48:ae:
         c0:cb:c3:d5:57:e5:42:0f:2f:e6:03:88:f2:de:e8:82:e9:a9:
         19:d1:a5:b4:65:23:0c:87:ef:67:b2:fe:bd:09:af:2a:38:17:
         5f:ec:85:f9:0c:ab:80:ee:1b:54:ea:de:1e:1f:f3:e9:01:12:
         40:9d:09:fa:6a:4c:e2:94:03:ca:51:9c:21:35:e8:c6:87:7f:
         60:f2:a6:cf:7e:a2:9f:b7:00:c3:6f:7e:7a:cc:91:76:db:00:
         3e:10:4c:8a:e5:cb:49:20:74:4b:6f:15:af:3f:0c:5f:e4:78:
         27:80:ad:ee:23:76:87:dd:cf:da:c8:79:e6:f4:44:af:c9:dd:
         9b:c9:d1:07:0d:8b:8d:13:60:4d:62:29:6b:29:68:01:b3:b6:
         07:db:66:c5:1a:24:c4:95:42:6a:1e:78:1a:51:eb:67:87:86:
         0b:65:41:86:8b:32:e0:0d:e4:84:21:eb:61:6a:f0:6d:9d:d8:
         9a:d2:a0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----